This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
Panorama Discussions
Post discussions about Panorama, a centralized network security management solution for all your Palo Alto Networks firewalls irrespective of their form factors or locations, in this forum.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Panorama Discussions
Post discussions about Panorama, a centralized network security management solution for all your Palo Alto Networks firewalls irrespective of their form factors or locations, in this forum.
About Panorama Discussions
Post discussions about Panorama, a centralized network security management solution for all your Palo Alto Networks firewalls irrespective of their form factors or locations, in this forum.

Discussions

Start a conversation

Welcome to the Panorama Discussions!

To make this forum valuable and enjoyable for everyone, please review the following guidelines before participating: Rules and Best Practices Be Respectful: Treat fellow community members with professionalism and courtesy. Constructive discussions are encouraged; disrespectful or inflammatory comments are not. Stay On-Topic: This board is d...

JayGolf by • Community Team Member
  • 4916 Views
  • 0 replies
  • 0 Likes

Moving Panorma to a different hypervisor

We following article https://docs.paloaltonetworks.com/panorama/9-1/panorama-admin/set-up-panorama/transition-to-a-different-panorama-model/migrate-a-panorama-virtual-appliance-to-a-different-hypervisor.html to migrate from Azure to ESX, and on commit of the restored configuration snapshot (STEP 10 of the article) we are receiving the error “In...

0.png

FIPS Enabled Panorama - Change Management IP

Hello, Is there a best practice, for changing the management IP on a FIPS enabled Panorama M-100?I have a FIPs enabled Panorama M-100. It is configured with a management interface for administrative functions on one network. It is configured with another interface on a different network to communicate with managed firewalls (Layer 2 Adjacent). I...

Roger_K by • L0 Member
  • 3046 Views
  • 2 replies
  • 0 Likes

Resolved! Multiple Portals Same Template Panorama Multiple Vsys

I'm trying to see if there is a good way to use templates to create 2 different global protect portals using panorama. This would be used as a failover scenario, and ease changes, allowing us to use 1 template to configure both firewalls. Name and fqdn would be the same, just failover to the other IP. Problem is that I can't seem to find...

Sec101 by • L4 Transporter
  • 8889 Views
  • 9 replies
  • 0 Likes

Disconnected from Panorama Server

Hello,We are getting a lot of alerts that saysDisconnected from Panorama Server:x.x.x.x., source: x.x.x.xI checked the interface statistics on both the Panorama server and the firewall and I didn't see any issue. Does anyone know what else could be causing this?Thanks,

x by • L1 Bithead
  • 4986 Views
  • 4 replies
  • 0 Likes

Resolved! Panorama SYSLOG Forwarding

Hi All, I'm trying to forward Firewall Traffic & Threat logs (sent to Panorama by managed Firewalls using a Log Forwarding Profile set on Security Policy Rules) using a SYSLOG Server Profile configured under 'Panorama -> Server Profiles -> SYSLOG'. My thinking is that sending all logs through Panorama will be easier to manage however I...

Josh990 by • L2 Linker
  • 5410 Views
  • 2 replies
  • 0 Likes

Change all IP address for firewall HA pair managed in Panorama

I have a HA firewall pair managed by Panorama. I would like to change all of the IP addresses of the interfaces. It's a lot to try to do through the GUI. My thinking is export the template as XML, make the necessary changes, and then import again. The firewall HA pair is a test harness. The existing configuration is from my production firewalls....

khsieh by • L2 Linker
  • 6256 Views
  • 3 replies
  • 0 Likes

Resolved! SDWAN PAN-OS and Panorama - Docs are rough

I am working through the panorama/sdwan plugin docs for a new deployment using Nextgen firewalls' built in SDWAN, all on 10.0.6 and the plugin version is 2.1In the docs there seems to be some conflicting advice. See below. Anyone know which is correct here? I have to ship these devices off, and obviously having this setting wrong will cause some...

dpayne_0-1623254186161.png
dpayne by • L1 Bithead
  • 3609 Views
  • 2 replies
  • 0 Likes

Resolved! eventid: mem-limit-exceeded in Panorama

We have received below email alert from Panorama , what is the meaning of this high severity system logs ?actionflags: 0x0type: SYSTEMsubtype: resctrlconfig_ver: 0time_generated: 2021/06/04 08:41:01high_res_timestamp: 2021-06-04T08:41:01.000+05:30dg_hier_level_1: 0dg_hier_level_2: 0dg_hier_level_3: 0dg_hier_level_4: 0vsys_name:device_name: Panor...

Deepak25 by • L3 Networker
  • 3925 Views
  • 1 replies
  • 0 Likes

master device in panorama device-group if using dataplane interface

Due to high cpu utilization in firewall , we want to use dataplane interface of firewall for user-id services.Currently , when primary firewall failover to secondary we do not require to change master device in panorama device-group.How panorama collecting user-id info if primary firewall which selected as a master in device-group becomes passiv...

Deepak_K_0-1622112578545.png
Deepak_K by • L3 Networker
  • 4035 Views
  • 3 replies
  • 0 Likes

Resolved! Do we need to separately upgrade a local log collector during a Panorama upgrade?

Hi All, We are going to perform a Panorama upgrade from 8.1.15 to 9.1.9. The upgrade path is 8.1.15 --> 8.1.19 --> 9.0 (Download Only) --> 9.0.13 --> 9.1 ( Download Only ) --> 9.1.9 ( Preferred version ). In this environment, there is a local log collector configured in the same Panorama ( Collector serial number is the same as th...

Udana by • L1 Bithead
  • 3870 Views
  • 3 replies
  • 0 Likes

Panorama mgmt CPU usage

We are managing 4 location HA pair from Panorama and collecting logs using management interface of M200. (all devices and panorama in same data centre)Sometimes we observed delay in logs and commit operation , but mgmt cpu of M200 is less than 50% at that time.mgmt cpu utilization in panorama is showing utilization of only mgmt interface or over...

Deepak_K by • L3 Networker
  • 4321 Views
  • 1 replies
  • 0 Likes

Pamorama Management Only Mode not show log on GUI

We have issue about Panorama Management Only Mode not show logs.We have M-200 run on Collector mode and Panorama-VM run on Management Only.This's new setup and the firewall can forward log to collector but Panorama Management Only mode not show log on GUI. We tried to restart and reboot the panorama. > debug software restart log-receiver , &g...

Jitaphon by • L2 Linker
  • 3111 Views
  • 2 replies
  • 0 Likes

Resolved! Panorama compatibility with previous versions

Do you know if Panorama could manage firewalls with versions far from the actual? For example, if I have a Panorama running version 10.0.x, can I manage firewalls running 8.0.x, 8.1.x, 9.0.x? or how many previous version could manage?

emendezo by • L1 Bithead
  • 4466 Views
  • 2 replies
  • 0 Likes
  • 853 Posts
  • 47 Subscriptions
Top Liked Authors
View All
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks